Date: Sun, 13 Oct 2002 14:31:24 -0400 (EDT) From: Robert Watson <rwatson@FreeBSD.org> To: "M. Warner Losh" <imp@bsdimp.com> Cc: mark@grondar.za, cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/etc group Message-ID: <Pine.NEB.3.96L.1021013143005.38261E-100000@fledge.watson.org> In-Reply-To: <20021013.121741.61891248.imp@bsdimp.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 13 Oct 2002, M. Warner Losh wrote: > In message: <Pine.NEB.3.96L.1021013140304.44458K-100000@fledge.watson.org> > Robert Watson <rwatson@FreeBSD.org> writes: > : Currently, it is, I believe. I was sure at one point that we supported a > : mode of operation for su that allowed any user to su to root if the wheel > : group was empty, and restricted it to the wheel group if it was non-empty. > > FreeBSD 4.5 definitely behaves this way, and I would be really horked if > 5.0-RELEASE doesn't have some way to get a similar result. I believe you accomplish it in the New World Order by dropping pam_wheel from the /etc/pam.d/su requirements. So I'm guessing that the current /etc/group arrangement with root appearing in both wheel and operator is the right one for the time being. Robert N M Watson FreeBSD Core Team, TrustedBSD Projects robert@fledge.watson.org Network Associates Laboratories To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.NEB.3.96L.1021013143005.38261E-100000>